fix url format in santitizer